4 ms·
Identity management with Active Directory is probably the biggest plus of a Windows environment; there's a saying that goes something like "in the end, every id
by alexchantavy 6y ago
Identity management with Active Directory is probably the biggest plus of a Windows environment; there's a saying that goes something like "in the end, every identity system ends up trying to be AD". Sure, you can run OpenLDAP on Linux and effectively get a domain controller, but the ready-to-go nature of AD on Windows Server is very compelling, especially for larger businesses.
- blaser-waffle 6y ago+1. Did a lot with LDAP auth in an all-linux environment but AD is much easier, IMO. I'm not even much of a Windows guy, but the pools documentation/youtube vids/number of people to ask the question to are way deeper.
- himinlomax 6y agoDon't use openldap, use FreeIPA (aka RedHat Identity Management). It covers most of AD's functions except GPOs, such as kerberos, HBAC, PKI, 2FA, HA, joining a client to a domain and so on. Nice GUI, decent CLI, installer takes care of everything on the client.